Description

SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager.

Remediation

References

CVE-2020-19217

Related Vulnerabilities

phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5159)

WordPress Resource Management Errors Vulnerability (CVE-2014-5265)

WordPress Plugin VK All in One Expansion Unit Cross-Site Scripting (9.85.0.1)

Telerik Web UI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2217)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29214)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2020-19217